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Closed-loop verification of applications 
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Courtesy Autonomous Systems Group, NASA Ames 
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Example: SMV (Carnegie Mellon U.) 
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Migration to Livingstone 2 (in progress) 







Live experience of V&V methods 
used by non-specialists. 



Instrument the code to be able to do full model checking 
(or as close as possible). 
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Re-use parts of Java model checker. 


Publications and Presentations 
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survey paper, temporal queries, closed-loop verification, . 



